google_iam_service_account_key resource

Syntax

A google_iam_service_account_key is used to test a Google ServiceAccountKey resource

Examples

google_iam_service_account_keys(project: 'chef-gcp-inspec', service_account: "[email protected]").key_names.each do |sa_key_name|
	describe
end

Properties

Properties that can be accessed from the google_iam_service_account_key resource:

name
The name of the key.
private_key_type
Output format for the service account key.
key_algorithm
Specifies the algorithm for the key.
private_key_data
Private key data. Base-64 encoded.
public_key_data
Public key data. Base-64 encoded.
valid_after_time
Key can only be used after this time.
valid_before_time
Key can only be used before this time.
key_type
Specifies the type of the key.

Possible values include:

  • KEY_TYPE_UNSPECIFIED
  • USER_MANAGED
  • SYSTEM_MANAGED
service_account
The name of the serviceAccount.
path
The full name of the file that will hold the service account private key. The management of this file will depend on the value of sync_file parameter. File path must be absolute.

GCP Permissions

Ensure the Identity and Access Management (IAM) API is enabled for the current project.

© Chef Software, Inc.
Licensed under the Creative Commons Attribution 3.0 Unported License.
The Chef™ Mark and Chef Logo are either registered trademarks/service marks or trademarks/servicemarks of Chef, in the United States and other countries and are used with Chef Inc's permission.
We are not affiliated with, endorsed or sponsored by Chef Inc.
https://docs.chef.io/inspec/resources/google_iam_service_account_key/